From 7654c42dc533f439e80aebe47bb3c2c8cc7e3976 Mon Sep 17 00:00:00 2001
From: swibrow <15628653+swibrow@users.noreply.github.com>
Date: Fri, 7 Aug 2026 07:59:54 +0200
Subject: [PATCH] feat(actions-runner): bake tflint into the mise toolchain
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Same rationale as actionlint (#6): home-ops' checks.yaml runs
pre-commit's terraform_tflint hook on every PR, which shells out to a
bare `tflint` on PATH — this image didn't ship one. Static,
version-insensitive binary, same category as hadolint/shellcheck.

Signed-off-by: swibrow <15628653+swibrow@users.noreply.github.com>
---
 images/actions-runner/metadata.yaml | 2 +-
 images/actions-runner/mise.toml     | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/images/actions-runner/metadata.yaml b/images/actions-runner/metadata.yaml
index 52b6c0e..f3e151e 100644
--- a/images/actions-runner/metadata.yaml
+++ b/images/actions-runner/metadata.yaml
@@ -7,7 +7,7 @@ description: GitHub Actions runner for Actions Runner Controller, with docker CL
 # tracks upstream on RUNNER_VERSION in the Dockerfile — deliberately not
 # annotated here, since a -N suffix is a semver pre-release and would be
 # "upgraded" straight back to the bare release.
-version: 2.336.0-4
+version: 2.336.0-5
 platforms:
   - linux/amd64
   - linux/arm64
diff --git a/images/actions-runner/mise.toml b/images/actions-runner/mise.toml
index 6d716bf..79289ba 100644
--- a/images/actions-runner/mise.toml
+++ b/images/actions-runner/mise.toml
@@ -10,4 +10,5 @@ actionlint = "1.7.12"
 gh = "2.96.0"
 hadolint = "2.14.0"
 shellcheck = "0.11.0"
+tflint = "0.64.0"
 yq = "4.53.3"